Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: 7+5hQ6i3Q72FnHoFBejzoF2NmswOsuxzuh32nGIbT78=
Subject key identifier: A8:2C:C9:CA:E8:A5:8E:E9:D3:58:F5:D5:46:E3:AC:4F:A0:33:2B:6D
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 019D37521614473416DF37509F05D2239C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0599
Signing time: Sun 29 Mar 2026 02:00:19 +0000
Manifest this update: Sun 29 Mar 2026 02:00:19 +0000
Manifest next update: Mon 30 Mar 2026 02:00:19 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: z/393XscFR4eGkvqMSDG9qsqXLhRSXgkGxd8tLv0Q4k=)
2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=)
3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=)
4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:16:14:47:34:16:df:37:50:9f:05:d2:23:9c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Mar 29 02:00:19 2026 GMT
Not After : Mar 30 02:00:19 2026 GMT
Subject: CN=a82cc9cae8a58ee9d358f5d546e3ac4fa0332b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:e1:d5:1f:ab:42:7d:e1:19:3a:f5:da:aa:
11:49:88:98:c4:53:e7:d7:e9:71:8c:fe:7f:ac:8d:
66:80:6d:7e:19:45:23:98:fd:7a:9e:d3:b7:68:ff:
11:e3:e5:ac:cd:c8:90:ec:b9:48:50:80:bf:ff:98:
3c:cf:a5:37:ec:63:ea:35:ab:1e:9e:1a:a9:87:fa:
e8:b2:31:2a:53:bb:53:95:cb:dc:79:03:00:5a:4d:
77:06:90:bf:b8:8d:d6:bb:d6:50:88:5d:49:2a:10:
f2:28:73:d7:36:49:4a:56:0f:cb:58:7e:f1:89:40:
65:8c:3e:21:3b:3c:1d:6e:6e:d8:13:d2:b1:8c:f3:
9a:6e:78:76:ad:b3:48:0e:68:0f:b9:ef:8e:ba:ae:
82:fe:18:3a:8f:88:6f:11:b9:d8:36:cd:d4:07:52:
97:d5:c9:11:7d:ae:5f:f2:2e:b9:bf:14:fe:a3:3a:
95:76:2f:21:3a:05:5b:07:01:91:9e:d4:c7:32:69:
4e:01:33:85:31:d4:f0:47:4f:9e:98:56:8c:a2:63:
d1:15:96:67:b7:c1:f4:c7:6d:72:d3:9b:b3:67:a5:
c0:ff:96:92:07:26:28:e2:b8:0c:7d:bb:dc:bd:71:
8d:aa:fb:06:44:dd:ea:d3:9d:ac:27:a8:a3:f6:55:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:C9:CA:E8:A5:8E:E9:D3:58:F5:D5:46:E3:AC:4F:A0:33:2B:6D
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:eb:51:15:61:1f:5a:b8:56:5e:0a:f5:36:91:3a:73:30:6b:
08:5f:4c:2e:04:f3:42:d3:58:dd:ac:00:cd:8b:87:06:c5:63:
ef:7a:53:9f:1b:ea:88:4b:64:6d:f2:c0:b3:b7:d8:2c:87:e1:
a1:88:7e:86:84:93:3e:b9:4b:f2:7b:5c:e2:bf:1a:f2:55:17:
85:79:77:19:b8:c0:94:82:5e:cc:d1:45:77:a1:79:24:92:9c:
7b:30:09:86:cf:2a:8e:32:3b:5d:e2:de:2b:b3:6d:b8:02:fa:
05:29:37:92:d5:8b:7a:84:8b:d9:a4:13:60:21:89:a4:89:e9:
98:d6:be:09:44:80:43:38:26:70:32:47:79:a2:9e:22:f9:ca:
82:4b:d1:a3:be:cb:d9:52:4a:89:5d:11:bf:f6:5e:1c:bb:b7:
fa:e6:5b:94:51:0a:9f:5f:09:cb:bf:2c:75:59:1a:59:1b:c1:
fa:86:bf:2a:35:b8:68:41:2c:47:a7:b6:5a:e9:fe:ee:7c:ef:
d4:ff:5a:77:ab:bd:86:70:46:39:a0:a5:66:7a:d0:e6:e4:f4:
5f:5d:4c:d9:4b:27:83:0c:87:d9:4c:87:de:85:8a:4a:0d:59:
9c:26:c4:cb:04:60:bb:a1:3a:d3:9d:98:39:f1:4f:3d:13:6e:
35:9d:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:58 2026 by rpki-client